skills/mathruffian-dot/opencode-lazy-packs/opencode-file-toolkit/Socket

opencode-file-toolkit

Warn

Audited by Socket on Jul 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core capabilities mostly match the stated toolkit purpose, and the main installers are largely official. However, the skill expands into broad host-level setup, executes external repo scripts, and asks for transitive installation of additional skills/repos, making its actual trust footprint larger than a normal file-processing skill.

Confidence: 87%Severity: 64%

Audit Metadata

Analyzed At

Jul 28, 2026, 02:35 AM

Package URL

pkg:socket/skills-sh/mathruffian-dot%2Fopencode-lazy-packs%2Fopencode-file-toolkit%2F@7bfe26645b360d4637a66f88dfb5d15a1ad9d9869a50f17be82706ad6faa0f05